AON Update It's a WAG, but the AON Deal with AC

AON Update

It's a WAG, but the AON Deal with ACS maybe Completed .

My Companies Retirement Medical was Tuned over to AON for Management When their DoD Contract was up, and the USAF Put up a new Contract for Bid.
The prior Contract was a Joint Contract between Computer Science's Corp (CSC) and Ratheon. A NEW company was formed and won the Bid about 5 years ago.

Anyway AON for the First Time in 5 years wants to send me updates via Email, and of course I had to Sign a HIPPA AGREEMENT.

Aon Retiree Health Exchange’s Commitment to Protecting Personal Information
We understand the responsibility that comes with being trusted with your personal information. We have implemented various security measures to protect the confidentiality of all the personal information we process, in both electronic and paper formats. We have policies, procedures and controls to reduce the risk of unauthorized or accidental use, disclosure, or destruction of your personal information, and we train our employees on data security. Only those employees who have a job-related need to access your personal information are authorized to do so. In addition to these employees, Aon Retiree Health Exchange limits access to your personal information to the insurance carrier in whose plan(s) you wish to enroll; authorized service providers (e.g. entities who provide recordkeeping services to your HRA, if any); and if your employer or former employer purchased services for you, your employer or former employer (generally, only plan participation or Health Reimbursement Account (HRA) information may be shared with an employer or former employer. Additionally, when you enter sensitive and protected data, we encrypt the transmission of that information using methods such as Secure Socket Layer Technology (SSL).

Of course they went went on and on, it is much longer, also Logging into their site, etc.

I guess they have gone HITECH :

"If we process your personal information, we will comply with the applicable requirements of relevant data protection laws.
For instance, when we process your “protected health information” as a business associate to a health plan, we comply with the requirements of the Health Insurance Portability and Accountability Act (HIPAA) Privacy and Security Rules as amended by the Health Information Technology for Economic and Clinical Health Act (HITECH).